Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u3kMmvIU_PfKovlUn0GOs9qgfws.roa
File: u3kMmvIU_PfKovlUn0GOs9qgfws.roa (raw, json)
Hash identifier: +/bQQmewIQpXgiRh0cQ4GcrWTbTt+u5eUqllOkZq89I=
Subject key identifier: BB:79:0C:9A:F2:14:FC:F7:CA:A2:F9:54:9F:41:8E:B3:DA:A0:7F:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0A8E44889467B40A95C2C93927B6DEF1D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u3kMmvIU_PfKovlUn0GOs9qgfws.roa
Signing time: Wed 16 Sep 2026 06:25:28 +0000
ROA not before: Wed 16 Sep 2026 06:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.253.67.0/24 maxlen: 24
31.13.230.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:e4:48:89:46:7b:40:a9:5c:2c:93:92:7b:6d:ef:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 16 06:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb790c9af214fcf7caa2f9549f418eb3daa07f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:28:7e:62:e3:0c:f2:dd:99:66:db:56:71:
e8:65:d8:ec:c6:3b:ee:cb:e4:45:9a:3e:d2:e1:ca:
3e:13:87:3e:8d:01:08:47:42:5c:b3:5f:b4:31:dc:
99:46:e6:f8:1e:5f:11:d7:27:af:b0:02:8c:cd:cc:
1e:10:23:68:da:96:15:80:57:2a:ef:41:ae:0c:4b:
fd:02:92:8c:92:75:ee:c8:54:31:41:86:fe:9f:2c:
5a:dc:36:60:da:a0:cf:3c:54:6b:49:e9:4d:a2:66:
e1:3a:82:38:a3:9f:49:86:ac:96:e0:5a:32:89:ed:
5e:45:a9:cf:96:5d:9c:67:8a:71:cd:28:b7:31:01:
3d:65:3d:7d:d8:dd:cc:76:54:d5:f5:12:c3:46:43:
bc:ad:3d:1f:b6:7c:40:09:83:33:ae:00:97:10:22:
d3:70:4c:a3:80:c9:f9:11:5d:d0:21:59:63:d2:f2:
b0:8c:de:5c:58:59:1a:9a:d8:b2:df:4d:af:6e:bf:
11:0d:90:be:c8:c5:94:95:c1:08:a0:1e:c0:3d:5c:
f4:8a:61:ff:44:7b:f9:16:9f:b6:e9:b7:48:b5:7b:
7e:9a:dd:c1:59:1f:d3:dd:bb:ea:bc:9b:a2:0b:f2:
a1:e3:a1:dd:6d:26:91:f5:b8:0d:b1:6e:25:85:cf:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:0C:9A:F2:14:FC:F7:CA:A2:F9:54:9F:41:8E:B3:DA:A0:7F:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u3kMmvIU_PfKovlUn0GOs9qgfws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
31.13.230.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.31.47.0/24
85.209.133.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
91.200.192.0/22
92.249.48.0/24
92.249.50.0/24
93.123.109.0/24
94.154.163.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:74:e8:04:a7:20:4d:da:17:b0:e9:3d:0e:28:51:da:96:12:
55:75:c2:82:e0:54:99:6c:43:bf:ca:d7:81:3f:4a:5f:3a:c1:
51:3c:76:8f:2b:1f:04:50:52:8a:eb:92:d1:0c:07:32:8f:7b:
14:ab:4f:1a:eb:fd:2b:9e:16:03:13:01:46:55:ca:8b:3a:36:
18:a4:44:4d:58:52:0a:24:30:2f:33:ba:ad:54:40:68:0c:95:
ba:1d:f5:dc:f5:ce:ee:b8:63:56:06:14:81:4c:ac:47:04:0e:
54:a3:7c:9a:28:7b:2b:d4:25:10:2f:b9:df:3a:3c:f7:3c:07:
fc:65:af:59:8a:ec:c9:9e:0d:ef:63:d2:39:9b:c8:2a:e5:d9:
81:47:a1:c8:98:1f:21:4d:7d:db:d9:cb:83:5b:dd:af:f5:89:
b3:62:91:76:fe:8f:00:af:d1:f0:fe:97:3e:9c:c0:e9:a2:78:
b4:8e:7e:8d:a8:d2:6f:aa:a4:54:a4:e8:83:0f:e1:7a:6e:88:
5f:06:98:1c:5e:b6:3c:55:6c:51:c1:a8:50:41:ed:19:4b:6e:
d6:62:b5:e3:60:ff:d3:ef:a2:d6:bd:c8:b6:e9:08:fe:5e:e6:
3d:2b:a8:ed:d8:99:d2:39:f0:3b:71:45:68:65:b2:06:9d:59:
5f:f6:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 12:27:16 2026 by rpki-client